Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
Victims (56)
Rapid Manufacturing
Manufacturing
Discovered: Oct 30, 2026 · Attack est.: Oct 29, 2026
[manufacturer] Rapid Manufacturing — a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico. Rapid Manufacturing is not a household name. But it is a critical Tier-1...
CP Manufacturing, Inc.
US
Manufacturing
Discovered: Oct 30, 2026 · Attack est.: Oct 29, 2026
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under the CP Group / CPG Sorting Technologies...
EWM Group
GB
Other
Discovered: Oct 28, 2026 · Attack est.: Oct 27, 2026
[fashion] EWM Group — the parent group behind Bonmarché, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains. The exposed material includes: 503,878 loyalty programme member...
Meleghy Automotive & Cie. GmbH
DE
Manufacturing
Discovered: Oct 28, 2026 · Attack est.: Oct 27, 2026
[automotive] The exposed material includes: Passport/visa/student-admission dossiers Tesla Model Y/Opal tooling, CAD and DFM tree Employee contract and HR folders MEB/BMW NCAR metrology and plant-layout trees PLC/SPS/robot backups and cross-reference...
GreenbergFarrow
Professional Services
Discovered: Oct 27, 2026 · Attack est.: Oct 26, 2026
[architecture] GreenbergFarrow — a respected ESOP-owned architecture firm headquartered in Atlanta, Georgia with offices in Charlotte, Dallas, Los Angeles, New York, Myrtle Beach, and international operations in Mexico, Colombia, India,...
Ernesto Malvestiti S.p.A.
IT
Manufacturing
Discovered: Oct 26, 2026 · Attack est.: Oct 25, 2026
[manufacturer] Ernesto Malvestiti S.p.A. — a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW, Valeo, BorgWarner, Schneider Electric, Fiat/Stellantis, and 150+ other automotive OEM. The exposed...
ARX Group SA
CH
Other
Discovered: Oct 23, 2026 · Attack est.: Oct 22, 2026
[consultancies, engineering] ARX Group SA — one of Switzerland's premier engineering consultancies, with 25+ offices in 17+ countries, known for iconic projects including the Ceneri Base Tunnel and dozens of...
Allmand-Smith Limited
GB
Manufacturing
Discovered: Oct 21, 2026 · Attack est.: Oct 20, 2026
[distributor, manufacturer] Allmand-Smith Limited (trading as Stormguard) — a UK manufacturer and distributor of building products headquartered in Stoke-on-Trent. Domain admin credentials in plaintext and a full DC dump —...
Duarte Nursery, Inc.
US
Agriculture and Food Production
Discovered: Oct 20, 2026 · Attack est.: Oct 19, 2026
Duarte Nursery, Inc. is a wholesale deciduous fruit and nut tree nursery in Hughson, California — an S Corporation run by brothers John and Jeff Duarte. The dataset is the...
POWERsonic Industries Inc.
US
Manufacturing
Discovered: Oct 19, 2026 · Attack est.: Oct 18, 2026
[manufacturer] POWERsonic Industries Inc. — a privately held wire harness and cable assembly contract manufacturer founded in 1998 with ~100-150 employees across 7 locations. The exposed material spans every entity...
Adams Warehouse & Delivery, Inc.
US
Transportation
Discovered: Oct 16, 2026 · Attack est.: Oct 15, 2026
Adams Warehouse & Delivery, Inc. — a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976. The dataset includes complete server backup mirrors...
Estrategias BigMat S.L.U.
ES
Retail & E-Commerce
Discovered: Oct 14, 2026 · Attack est.: Oct 13, 2026
[distribution] Estrategias BigMat S.L.U. — the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials distribution networks. 624 SEPA payroll XML files (2022–2025)...
The Buckner Company, Inc.
US
Other
Discovered: Oct 13, 2026 · Attack est.: Oct 12, 2026
[insurance] The Buckner Company, Inc. is a commercial property & casualty insurance brokerage headquartered in Salt Lake City, Utah, with a second office in Denver, Colorado. The exfiltrated dataset includes:...
Rechtsanwaltskanzlei Dr. Bien
DE
Professional Services
Discovered: Oct 12, 2026 · Attack est.: Oct 11, 2026
[law] Rechtsanwaltskanzlei Dr. Bien — a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen. The exposed material includes: 2,387 WinSolvenz case databases...
Infomedia A/S
DK
Technology
Discovered: Oct 5, 2026 · Attack est.: Oct 4, 2026
[monitoring] Infomedia A/S — Denmark's premier media monitoring company, co-owned by the country's two largest media conglomerates (JP/Politikens Hus and Berlingske Media). Infomedia sits at the heart of Nordic media....
Thomas Y. Pickett & Co., Inc.
US
Professional Services
Discovered: Oct 5, 2026 · Attack est.: Oct 4, 2026
[consulting] Thomas Y. Pickett & Co., Inc. — founded in 1926, headquartered in Addison/Dallas, Texas — is one of the oldest property tax appraisal consulting firms in the United States....
Laboratorios Roemmers SAICF
AR
Healthcare
Discovered: Oct 1, 2026 · Attack est.: Sep 30, 2026
Laboratorios Roemmers SAICF — Argentina's #1 pharmaceutical company by revenue, with €1.669 billion in consolidated turnover, 6,890 employees, and 69 subsidiaries across 11 countries. The exposed material includes: 4,207 employees'...
Buford-Thompson Company, LTD
US
Manufacturing
Discovered: Sep 30, 2026 · Attack est.: Sep 29, 2026
[construction] Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state. The exposed dataset totals 1.707 TB and includes:...
Jinny Beauty Supply
US
Retail & E-Commerce
Discovered: Sep 7, 2026 · Attack est.: Sep 6, 2026
[distributors] Jinny Beauty Supply is one of the largest Korean-American wholesale beauty distributors in the US, operating 9 distribution centers from Doraville, Georgia to Commerce, California. They serve 7,400+ beauty...
Metrea LLC/Commuter Air Technology, Inc.
US
Transportation
Discovered: Sep 5, 2026 · Attack est.: Sep 4, 2026
[defence] Metrea LLC (formerly Meta Special Aerospace, LLC) and its subsidiary Commuter Air Technology, Inc. (CAT) are US defense contractors providing Contractor Owned, Contractor Operated (COCO) ISR aircraft services to...
Chip 1 Exchange
US
Technology
Discovered: Sep 2, 2026 · Attack est.: Sep 1, 2026
[distributor] Chip 1 Exchange — a global independent electronics distributor headquartered in Neu-Isenburg, Germany, with primary US operations in Laguna Hills, California. The dataset spans 13 years (2013-2026) of corporate...
Ishbia & Gagleard, P.C.
US
Professional Services
Discovered: Aug 31, 2026 · Attack est.: Aug 30, 2026
[law] Ishbia & Gagleard, P.C. — a boutique law firm in Birmingham, Michigan, founded in 1999 by Jeffrey A. Ishbia and Michael A. Gagleard. The firm practises real estate, corporate,...
Benshaw, Inc.
US
Manufacturing
Discovered: Sep 7, 2026 · Attack est.: Aug 26, 2026
[manufacturer, research] Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). ~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address...
EDIF S.p.A.
IT
Manufacturing
Discovered: Sep 4, 2026 · Attack est.: Aug 26, 2026
[wholesale] EDIF S.p.A. is an Italian wholesale distributor of electrical equipment, plumbing, and lighting systems. The exposed files include passwords for company systems, customer file transfers, certified email and warehouse...
ERPIS LLC
Professional Services
Discovered: Aug 26, 2026 · Attack est.: Aug 25, 2026
[software] ERPIS LLC (doing business as ShipERP) — a Texas-based SAP integrator whose single product is enterprise shipping management software used by Boeing, Pfizer, NVIDIA, John Deere, Medtronic, and 83...
Planungsgruppe M+M AG
DE
Professional Services
Discovered: Aug 17, 2026 · Attack est.: Aug 16, 2026
Planungsgruppe M+M AG is a German Aktiengesellschaft headquartered in Böblingen, Baden-Württemberg, with approximately 432 employees across 10 offices (Böblingen, Stuttgart, München, Nürnberg, Regensburg, Ingolstadt, Augsburg, Esslingen, Mannheim, Frankfurt). Annual revenue:...
Natco Home Group
US
Retail & E-Commerce
Discovered: Aug 17, 2026 · Attack est.: Aug 16, 2026
[manufacturer] Natco Home Group — a fourth-generation, family-owned home furnishings manufacturer headquartered in West Warwick, Rhode Island, with ~800 employees, ~$100M annual revenue, and facilities across seven US states. The...
Lloyd Coils Europe
GB
Manufacturing
Discovered: Aug 17, 2026 · Attack est.: Aug 16, 2026
[manufacturer] 4 Coils Technology s.r.o. (trading as Lloyd Coils Europe) is a Czech-headquartered manufacturer of custom heat exchangers for the HVAC&R industry, with offices in Germany, France, and the United...
FREYWILLE
AT
Retail & E-Commerce
Discovered: Aug 11, 2026 · Attack est.: Aug 10, 2026
[jewelry] FREYWILLE — the Austrian luxury fire-enamel jewelry house with 70+ boutiques across Europe, the Americas, Middle East, Russia/CIS, and Asia-Pacific. 142+ employee files with salary statements (2024–2026), social security...
GILDE Handwerk Macrander GmbH & Co. KG
DE
Manufacturing
Discovered: Aug 4, 2026 · Attack est.: Aug 3, 2026
[wholesale] GILDE Handwerk Macrander GmbH & Co. KG is a family-owned German Mittelstand group headquartered in Bocholt, Nordrhein-Westfalen. The GILDE Gruppe operates across wholesale trade in gifts, home accessories, and...
US Installation Group, Inc.
US
Manufacturing
Discovered: Aug 4, 2026 · Attack est.: Aug 3, 2026
Founded by Bruce DeLuca in Boca Raton, Florida, USIG operates through 15+ legal entities under MRS Holdings, performing over 100,000 installations annually across 33 markets in 14 states.
Van Eijck International Car Rescue
NL
Transportation
Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[recovery, rescue] Van Eijck International Car Rescue B.V. — a family-owned Dutch towing and recovery company with 225+ vehicles, 180+ employees, and 20 branch offices across the Netherlands and Spain....
Evosys Laser GmbH
DE
Manufacturing
Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[manufacturer] Evosys Laser GmbH — an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers. The dataset...
Pyramid Analytics B.V.
NL
Technology
Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[analytics] Pyramid Analytics B.V. — a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW) for hundreds of millions of dollars just four months earlier. We obtained the...
Bretford Manufacturing
US
Manufacturing
Discovered: Jul 29, 2026 · Attack est.: Jul 28, 2026
Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devices, founded in 1948 and headquartered in Franklin Park, Illinois. With ~60 employees and ~$10M annual revenue,...
Primed Halberstadt Medizintechnik
DE
Healthcare
Discovered: Jun 30, 2026 · Attack est.: Jun 29, 2026
[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG). The exfiltration captured four...
Corporación Primax S.A.
PE
Retail & E-Commerce
Discovered: Jun 23, 2026 · Attack est.: Jun 22, 2026
[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset...
Aerospace & Advanced Composites GmbH
DE
Manufacturing
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained two complete NAS snapshots spanning 30+ years of operations:...
NTP B.V. Civil Engineering Construction
NL
Manufacturing
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They build roads, lay cables, install sewers, and perform ground...
Kochs GmbH
DE
Manufacturing
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordrhein-Westfalen, with ~240 employees across Germany, the Netherlands, and Hungary. The exposed material...
NationsBuilders Insurance Services
Financial Services
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance — a specialty managing general underwriter founded in Atlanta in 2001, acquired by...
Hagerman & Company
Professional Services
Discovered: Jun 19, 2026 · Attack est.: Jun 18, 2026
*** — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ enterprise customers across manufacturing, energy, defense, healthcare, and education. The exposed dataset includes: Complete proprietary source...
Allan Brothers Fruit
US
Agriculture and Food Production
Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[food] Allan Brothers, Inc. — a third-generation, family-owned tree-fruit operation headquartered in Naches, Washington. Allan Brothers packs and ships apples and cherries from a 300,000 sq ft cold-storage facility, employing...
Diamond Truck Centres
CA
Transportation
Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[dealership, trucks] *** — Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue, 250 employees). The dataset spans 17 years of unbroken operational history...
Sumitomo Electric Bordnetze
DE
Manufacturing
Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE:5802, ~$31B group revenue), employing approximately 40,000 people across 14 countries. Exfiltrated 1.1 terabytes of data from five...
ALS Global
AU
Professional Services
Discovered: Jun 19, 2026 · Attack est.: Jun 4, 2026
[certification, inspection] ALS Limited (ASX:ALQ) — a global testing, inspection, and certification company with AUD 3.19B revenue, 20,500+ employees, and operations in 65+ countries — identified unauthorised access to its...
Avanti Windows & Doors
US
Manufacturing
Discovered: May 12, 2026 · Attack est.: May 11, 2026
Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regional offices across Nevada, Texas, California, and Florida. The exposed material includes: Plaintext SQL Server...
Atlas Metal Industries Inc
CA
Manufacturing
Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufacturer headquartered in Miami, Florida. The dataset is a complete Microsoft Dynamics GP environment: production databases, payroll records, system...
Costa Solutions, LLC
US
Professional Services
Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M annual revenue and 200–1,000 employees. The file server contained the complete...
Bayou Title, Inc.
US
Financial Services
Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services provider in Louisiana, with 19 full-service locations statewide. The exfiltrated data spans 20+ years of operations (2004–2026)...
Startec Group of Companies
PH
Professional Services
Discovered: May 12, 2026 · Attack est.: Apr 22, 2026
Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Cawthorn. Startec designs, fabricates, installs, and services compression, process, and refrigeration systems for oil-and-gas operators...
NorthWest Handling Systems
CA
Transportation
Discovered: May 12, 2026 · Attack est.: Apr 22, 2026
[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with branches across WA, OR, and AK. The dump is the entire corporate file...
Law Offices of Michael A. Freedman, P.A. (maflaw.com)
US
Professional Services
Discovered: Apr 29, 2026 · Attack est.: Apr 22, 2026
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used / 143 GB at root level / 196,701 files / 19,231 directories, dated as...
Baresque Group
GB
Retail & E-Commerce
Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia, with offices in Dallas, Chicago, and Brussels. The exposed material includes: 100+ passport scans, 35 birth certificates, 60+...
Cheval Blanc Randheli
MV
Hospitality
Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years The single largest data category: 75,855 passport scan images spanning January 2015 through October 2024, organised in daily folders within monthly...
Advanta Genetics LLC
US
Healthcare
Discovered: Apr 29, 2026 · Attack est.: Apr 16, 2026
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives — including highly sensitive chronic...
